最新のNSE8_813問題集で試験を準備する

Fortinet NSE8_813 試験概要:

Fortinet NSE8_813 試験シラバストピック:

Fortinet NSE 8 - Recertification 認定 NSE8_813 試験問題：

1. A legacy router has been replaced by a FortiGate device. The FortiGate has inherited the management IP address of the router and now the network administrator needs to remove the router from the FortiSIEM configuration.
Which two statements about this operation are true? (Choose two.)

A) By default, FortiSIEM can only parser event logs for FortiGate devices.
B) FortiSIEM will discover a new device for the FortiGate with the same IP.
C) The router will be completely deleted from the FortiSIEM database.
D) FortiSIEM will move the router device into the Decommission folder.

2. You are investigating a problem related to FTP active mode.
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file. The FortiGate translates source address (SNAT) in network
10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)

A)

B)

C)

D)

3. Your FortiGate has multiple CPUs. You want to verify the load for each CPU. Which two commands will accomplish this task? (Choose two.)

A) get system performance status
B) diag system top
C) diag system mpstat
D) diag system cpu stat

4. You notice that memory usage is high and FortiGate has entered conserve mode.
You want FortiGate's IPS engine to focus only on exploits and attacks that are applicable to your specific network.
Which two steps would you take to reduce RAM usage without weakening security? (Choose two.)

A) Disable application control for protocols that are not used on your network.
B) Disable IPS for traffic destined for the FortiGate itself.
C) Configure IPS to pass files that are larger than a specific threshold, instead of buffering and scanning them.
D) Reduce the size of the signature three (filters) that FortiGate must search by disabling scans for applications and OS stacks that do not exist on your network.

5. An organization has one central site and three remote sites. A FortiSIEM has been installed on the central site and now all devices across the remote sites must be centrally monitored by the FortiSIEM at the central site.
Which action will reduce the WAN usage by the monitoring system?

A) Disable real-time log upload on the remote sites.
B) Enable SD-WAN FEC (Forward Error Correction) on the FortiGate at the remote site.
C) Install both Supervisor and Collector on each remote site.
D) Install local Collectors on each remote site.

質問と回答：